About this tool
The UPI QR Generator creates payment QR codes compatible with all UPI apps - Google Pay, PhonePe, Paytm, BHIM, and others. Enter your UPI ID, name, and optional amount to generate a scannable QR code. Download it as PNG for your shop, invoice, or website.
How QR codes actually work
A QR (Quick Response) code is a two-dimensional matrix barcode invented by Masahiro Hara at Denso Wave (a Toyota subsidiary) in 1994 to track auto parts. Denso Wave still holds the trademark on "QR Code" but waived all patent royalties, which is why every modern phone can scan one for free. The standard is ISO/IEC 18004:2015.
Every QR code contains four structural elements:
- Finder patterns - the three large squares in the corners. They tell the scanner where the code starts and what orientation it is in.
- Alignment patterns - smaller squares scattered inside, used to correct for perspective distortion (camera tilt).
- Timing patterns - alternating dark/light dots between the finder patterns; they encode the grid size.
- Data + error-correction modules - the actual encoded message, interleaved with Reed-Solomon error-correction bytes.
Error correction levels
QR codes use Reed-Solomon error correction. You pick the level when generating:
| Level | Recovery | Best when | Capacity tradeoff |
|---|---|---|---|
| L (Low) | 7% | Clean printing, no logo, indoor display | Maximum capacity |
| M (Medium) | 15% | Standard print or screen, no logo | Default for most generators |
| Q (Quartile) | 25% | Some damage expected, small logo overlay | 20% less data than L |
| H (High) | 30% | Outdoor, weathered, with logo, or expected scratching | 40% less data than L |
Capacity vs error correction
Higher error correction means less data fits. Here is the maximum capacity at version 40 (the largest grid, 177x177 modules):
For a logo overlay, you almost always need level Q or H - the logo covers up to 25-30% of the modules. The error correction lets the scanner reconstruct the masked area.
QR Code versions and sizes
QR codes come in 40 versions. Version 1 is 21x21 modules and stores up to 25 alphanumeric characters. Each version adds 4 modules per side, so version 40 is 177x177 modules and stores up to 4,296 alphanumeric characters. Most generators (this one included) auto-pick the smallest version that fits your data plus error correction.
QR codes vs other 2D barcodes
| Format | Capacity | Patent / royalty | Best for |
|---|---|---|---|
| QR Code (ISO/IEC 18004) | 7,089 numeric / 4,296 alnum / 2,953 bytes | Free, open standard since 2000 | URL, vCard, WiFi, payments, tickets |
| Data Matrix (ISO/IEC 16022) | 3,116 numeric / 2,335 alnum | Free | Small parts marking, electronics, medical |
| Aztec (ISO/IEC 24778) | 3,832 numeric / 3,067 alnum | Free since 2008 | Transport tickets, boarding passes |
| PDF417 (ISO/IEC 15438) | 2,710 alnum (stacked) | Free | ID cards, shipping labels, US AAMVA driver licences |
Practical tips for scannable QR codes
- Contrast: dark modules on light background. Inverted (light on dark) works but cuts scan success ~15% on older scanners.
- Quiet zone: always leave a 4-module border (about 4x the size of a single module) of white space around the code. Crops break scanning.
- Minimum print size: ~2cm (0.8 in) per side at 30cm reading distance. Scale up for longer distances: rule of thumb is print size = distance / 10.
- Logo overlay: keep logos under 25% of total area and centered. Use level Q or H. The logo overlap masks data modules; the error correction rebuilds them.
- Test before deploying: scan with iOS Camera, Google Lens, and at least one dedicated QR app. Different parsers handle edge cases differently.
Where QR codes show up
- Payments: UPI in India (over $3 trillion in 2024 alone), Alipay/WeChat in China, dynamic checkout codes globally.
- Restaurant menus: ubiquitous post-2020; saves printing costs and lets restaurants update prices/availability instantly.
- Tickets and boarding passes: contains booking reference + verification hash. Aztec is more common in aviation; QR is standard for events.
- Business cards: vCard QR codes save your contact straight to the phone address book.
- WiFi sharing: encode SSID + password + encryption type. iOS 11+ and Android 10+ auto-join when scanned.
Security considerations
QR codes are not signed or encrypted by default. The QR itself just encodes text - it's the consuming app that decides what to do with that text. Risks to be aware of:
- Quishing (QR phishing): fake QR stickers slapped over real ones at parking meters, restaurants, charging stations. The URL inside redirects to a credential-harvesting page. Always preview the URL in your camera app before opening.
- Sensitive data in plain QR: anyone who photographs your code can decode it. Don't put passwords, account numbers, or PII in a static QR.
- WiFi QR caveat: scanning a WiFi QR auto-joins the network. If a malicious code points to an open evil-twin network, your phone joins silently.
Frequently asked questions
How does UPI QR work?
It encodes a upi://pay link with your UPI ID, name, and optional amount. Any UPI app can scan and pre-fill payment details.
Is the amount required?
No. QR with just UPI ID works - the payer enters the amount manually.
How long does a QR code last?
Indefinitely if the encoded URL stays alive. The QR itself doesn't expire. For dynamic redirects (where the URL points to a tracker that forwards), the QR works as long as the redirect service stays online.
Can I change the destination after printing?
Only if you use a dynamic QR service that maps the QR to an editable redirect. Plain static QRs encode the destination directly, so reprinting is the only way to change it.
Why does my QR fail to scan?
Most common reasons (in order): missing quiet zone, printed too small for the data density, low contrast, glossy reflection on the camera, or the logo overlay is too large for the error-correction level. Lower your data density (shorter URL) or raise the error-correction level.
Do QR codes work offline?
Yes - the data is encoded in the image itself. Scanning works offline. The action the scanner takes (opening a URL, joining WiFi, etc.) may require connectivity, but decoding doesn't.
Is there a maximum URL length?
Yes - 4,296 alphanumeric characters at error level L, but practical scanning starts to fail above ~500 characters because the modules get tiny on a phone screen. Use a URL shortener if your destination is long.
Can QR codes carry viruses?
The QR is just text. It cannot execute code. The risk is what happens after scanning - a malicious URL inside the QR may lead to a drive-by download or phishing page. Always preview the URL before opening.
Does scanning a QR code cost money?
No. Scanning is free; modern phone cameras scan QR natively. The destination URL or action (joining WiFi, opening a website) may use data, but the scan itself doesn't.
Are QR codes still safe to use in 2026?
Yes for technology, with caution for context. The QR format itself is unchanged since 2000 and is widely supported. The risk is what's encoded - always preview URLs before opening, especially from physical stickers in public spaces.
Can I generate a QR code that expires?
Not in the static QR itself - the data is fixed once encoded. Use a dynamic QR service that controls the destination URL, and disable the redirect at the desired time.
What QR generator do major brands use?
Most enterprises use commercial dynamic QR services (Beaconstac, QR Code Generator Pro, Bitly QR) for analytics and revocation. For static codes, open-source libraries like qr-code-styling (used by this tool) produce broadcast-quality output.
Why do some QR codes work in iOS Camera but not Google Lens?
Different parsers handle edge cases differently. iOS Camera is more lenient with malformed quiet zones; Google Lens requires stricter compliance. If a code works only in one, fix the quiet zone and re-test.
Do scanned QR codes leak my data?
No. The phone scans locally; no data is sent during scanning. The destination URL may collect data when you visit it (the website operator, not 3Tej). Preview the URL before opening sensitive links.